aboutsummaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2016-11-10netfilter: ipset: Simplify mtype_expire() for hash typesJozsef Kadlecsik1-13/+12
2016-11-10netfilter: ipset: Remove redundant mtype_expire() argumentsJozsef Kadlecsik1-4/+5
2016-11-10netfilter: ipset: Count non-static extension memory for userspaceJozsef Kadlecsik4-17/+21
2016-11-10netfilter: ipset: Add element count to all set types headerJozsef Kadlecsik3-13/+24
2016-11-10netfilter: ipset: Add element count to hash headersEric B Munson1-1/+2
2016-11-10netfilter: ipset: Separate memsize calculation code into dedicated functionJozsef Kadlecsik2-7/+27
2016-11-10netfilter: ipset: Improve skbinfo get/init helpersJozsef Kadlecsik2-11/+13
2016-11-10netfilter: conntrack: fix NF_REPEAT handlingArnd Bergmann1-10/+8
2016-11-09netfilter: conntrack: simplify init/uninit of L4 protocol trackersDavide Caratti5-126/+118
2016-11-09netfilter: nf_tables: simplify the basic expressions' init routineLiping Zhang9-150/+34
2016-11-09netfilter: nft_hash: get random bytes if seed is not specifiedPablo Neira Ayuso1-2/+4
2016-11-08netfilter: nf_tables: fix oops when inserting an element into a verdict mapLiping Zhang1-0/+1
2016-11-08netfilter: conntrack: refine gc worker heuristicsFlorian Westphal1-8/+41
2016-11-08netfilter: conntrack: fix CT target for UNSPEC helpersFlorian Westphal1-3/+8
2016-11-08netfilter: connmark: ignore skbs with magic untracked conntrack objectsFlorian Westphal1-2/+2
2016-11-08ipvs: use IPVS_CMD_ATTR_MAX for family.maxattrWANG Cong1-1/+1
2016-11-03netfilter: handle NF_REPEAT from nf_conntrack_in()Pablo Neira Ayuso2-7/+6
2016-11-03netfilter: merge nf_iterate() into nf_hook_slow()Pablo Neira Ayuso3-50/+48
2016-11-03netfilter: remove hook_entries field from nf_hook_statePablo Neira Ayuso3-14/+10
2016-11-03netfilter: use switch() to handle verdict cases from nf_hook_slow()Pablo Neira Ayuso1-4/+14
2016-11-03netfilter: nf_tables: use hook state from xt_action_param structurePablo Neira Ayuso11-32/+32
2016-11-03netfilter: x_tables: move hook state into xt_action_param structurePablo Neira Ayuso26-90/+92
2016-11-03netfilter: deprecate NF_STOPPablo Neira Ayuso1-1/+1
2016-11-03netfilter: kill NF_HOOK_THRESH() and state->treshPablo Neira Ayuso2-6/+0
2016-11-03netfilter: remove comments that predate rcu daysPablo Neira Ayuso1-7/+0
2016-11-03netfilter: get rid of useless debugging from corePablo Neira Ayuso1-9/+0
2016-11-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller17-325/+621
2016-11-01netfilter: nf_queue: place volatile data in own cachelineFlorian Westphal1-1/+1
2016-11-01netfilter: nf_tables: remove useless U8_MAX validationLiping Zhang2-6/+0
2016-11-01netfilter: nf_tables: introduce routing expressionAnders K. Pedersen3-0/+160
2016-11-01netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.cPablo Neira Ayuso2-296/+12
2016-11-01netfilter: nf_log: add packet logging for netdev familyPablo Neira Ayuso4-0/+114
2016-11-01netfilter: nf_tables: add fib expressionFlorian Westphal4-0/+256
2016-10-31netfilter: nf_tables: destroy the set if fail to add transactionLiping Zhang1-1/+3
2016-10-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller13-42/+70
2016-10-28netfilter: ip_vs_sync: fix bogus maybe-uninitialized warningArnd Bergmann1-2/+5
2016-10-27genetlink: mark families as __ro_after_initJohannes Berg1-1/+1
2016-10-27genetlink: statically initialize familiesJohannes Berg1-9/+13
2016-10-27genetlink: no longer support using static family IDsJohannes Berg1-1/+0
2016-10-27netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_...John W. Linville1-1/+1
2016-10-27netfilter: nf_conntrack_sip: extend request line validationUlrich Weber1-1/+4
2016-10-27netfilter: nf_tables: fix race when create new element in dynsetLiping Zhang1-3/+12
2016-10-27netfilter: nf_tables: fix *leak* when expr clone failLiping Zhang4-14/+19
2016-10-27netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabledLiping Zhang1-0/+3
2016-10-26netfilter: nft_ct: add notrack supportPablo Neira Ayuso1-1/+49
2016-10-26netfilter: nft_meta: permit pkttype mangling in ip/ip6 preroutingLiping Zhang1-0/+5
2016-10-26netfilter: nft_numgen: start round robin from zeroLiping Zhang1-1/+1
2016-10-26netfilter: nf_tables: allow expressions to return STOLENFlorian Westphal1-0/+1
2016-10-26netfilter: nfnetlink_log: Use GFP_NOWARN for skb allocationCalvin Owens1-1/+1
2016-10-26netfilter: xt_multiport: Use switch case instead of multiple condition checksGao Feng1-19/+21